From 7138219e3c9446bf981ff17f5609f42130bec414 Mon Sep 17 00:00:00 2001 From: V3n3RiX Date: Sat, 24 Sep 2022 17:32:06 +0100 Subject: gentoo auto-resync : 24:09:2022 - 17:32:06 --- net-libs/Manifest.gz | Bin 32617 -> 32615 bytes net-libs/glib-networking/Manifest | 2 + .../glib-networking/glib-networking-2.74.0.ebuild | 82 +++++++++++++++++++++ net-libs/libvncserver/Manifest | 2 + .../files/libvncserver-0.9.13-CVE-2020-29260.patch | 27 +++++++ .../libvncserver/libvncserver-0.9.13-r1.ebuild | 76 +++++++++++++++++++ 6 files changed, 189 insertions(+) create mode 100644 net-libs/glib-networking/glib-networking-2.74.0.ebuild create mode 100644 net-libs/libvncserver/files/libvncserver-0.9.13-CVE-2020-29260.patch create mode 100644 net-libs/libvncserver/libvncserver-0.9.13-r1.ebuild (limited to 'net-libs') diff --git a/net-libs/Manifest.gz b/net-libs/Manifest.gz index 96779d6902d7..3b9e2cf9a42c 100644 Binary files a/net-libs/Manifest.gz and b/net-libs/Manifest.gz differ diff --git a/net-libs/glib-networking/Manifest b/net-libs/glib-networking/Manifest index e3491784ea52..ca9345c8bf8c 100644 --- a/net-libs/glib-networking/Manifest +++ b/net-libs/glib-networking/Manifest @@ -1,5 +1,7 @@ DIST glib-networking-2.72.1.tar.xz 265308 BLAKE2B 84264df5e094a4c57d86edd57fdedb11ad00eec5937eb056de34ec3d38a0e0e2ec3d71a5ad4ab0386c45681c8784b792ca6ded9c048d93c3ed1ad47d2f31f44e SHA512 243f54f4fbce40211f276c4f56e4e40507ecb0b23527a04b2d5bd67185c017f736f088c71ebf225e69e1ae8efa5b835edd68ea5c96df3ff69a25fd391e5c52d0 DIST glib-networking-2.72.2.tar.xz 265268 BLAKE2B 90e6eee44faeb495e26a61d15fab66034784637f43d2184901099a6daa69e36d39f732cd5ccd5262f213f19329982264138592b60a08009f4ff034a3ad20922a SHA512 b2837f1521ea8312fb508d3000d465898d409bb48033a63430609331f45628f6b49eaaf16278f2ef48c41b9fccf38f78a85374d23e9ea75692a11cbd7ef058ec +DIST glib-networking-2.74.0.tar.xz 277232 BLAKE2B d0027a3beff276b2d0b008d1ed0bdeef231d8fb03c26c2e301a3eaef76ad4b704a5db36f6265c5516d73c5dbdb98c7c0919b6924038506dad0123f5ec77577b2 SHA512 f266c106f2c9379b95773a852c1b5c62ae1d6a758d25c436c3558f620d8e0a211201b3c4dfd89cdbe28b88430bba0cca621e62c01ea23d473983e203919bb1e6 EBUILD glib-networking-2.72.1.ebuild 2004 BLAKE2B 7940597d2b326c67ce959273b033da365eb5f46825e837b02104947ec7557cd578b7b38605c495ed9fb89f8f0f827a64638a8f48846ae66965b61fb1dee9e470 SHA512 afdd73225c34ee65730ef93815a45de4787c8d42fab4212d4f24612c5935a43dd4980e421a6563efdd02b8089c737b507b43eaad30c98ef787b15a41a58401ec EBUILD glib-networking-2.72.2.ebuild 2007 BLAKE2B 62aeb48977e0e77c7ca5d4d6dc92fead10f2fe6e042c87376a5242507bcb40aa02dd08ec65cfc0400e6223e2449680c23d603dc87cbf9493a95992ef397dcfc6 SHA512 58279adc3a8cf688833483e43def7d0f7b3d002b35f69c3a6e0710a5614daae824fe57fb78e497c7d68a2950c9dc3107c02a5c28917a31d4de615c8110c159d3 +EBUILD glib-networking-2.74.0.ebuild 2051 BLAKE2B d9933af6c3bfa24fc94e9d9b0e4d48b1c4b77b8c04895f171513e74f38a579ff50869459b0e7c70a513f1fb520feaa60306913591020271f02c7eef1f9446822 SHA512 6d5cc61f9f447278bfd941d65306d8a7a46d96942762c36f7e6e1b2036f3ccc4d1954c63dd031f178e0d66416b50a18aa2c6177058ea216446e6190fafbe70f8 MISC metadata.xml 482 BLAKE2B 6476d4ef1f145739fddc035541725994d4866553b56bb34606863d23c615b33f63db35368ba382fcf9846cb485ee050d850596fc91c72551c5f3798ce240910c SHA512 3dcd22ea3b3fb78f11aead9e57d3a30e4f60e468209729c9e4c4647bf6c8e9163dfaae1a99ca00fed1e46f5288f73c2eb671f480fcc8349366daaa6670357983 diff --git a/net-libs/glib-networking/glib-networking-2.74.0.ebuild b/net-libs/glib-networking/glib-networking-2.74.0.ebuild new file mode 100644 index 000000000000..daa6560dc62e --- /dev/null +++ b/net-libs/glib-networking/glib-networking-2.74.0.ebuild @@ -0,0 +1,82 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit gnome.org gnome2-utils meson-multilib xdg + +DESCRIPTION="Network-related giomodules for glib" +HOMEPAGE="https://gitlab.gnome.org/GNOME/glib-networking" + +LICENSE="LGPL-2.1+" +SLOT="0" +IUSE="+gnome +libproxy +ssl test" +RESTRICT="!test? ( test )" +KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~loong ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris" + +RDEPEND=" + >=dev-libs/glib-2.73.3:2[${MULTILIB_USEDEP}] + libproxy? ( >=net-libs/libproxy-0.4.16:=[${MULTILIB_USEDEP}] ) + >=net-libs/gnutls-3.7.4:=[${MULTILIB_USEDEP}] + ssl? ( app-misc/ca-certificates ) + gnome? ( gnome-base/gsettings-desktop-schemas ) +" +DEPEND="${RDEPEND} + test? ( net-libs/gnutls[pkcs11] ) +" +BDEPEND=" + >=sys-devel/gettext-0.19.8 + virtual/pkgconfig + test? ( sys-apps/dbus ) +" + +src_prepare() { + default + xdg_environment_reset + + if ! use test ; then + # Don't build tests unconditionally + # This is a hack to avoid needing gnutls[pkcs11] when USE=-test + # It may become a real runtime dependency in future + # Please check! + # bug #777462 + sed -i "/^subdir('tests')/d" tls/meson.build || die + fi +} + +multilib_src_configure() { + local emesonargs=( + -Dgnutls=enabled + -Dopenssl=disabled + $(meson_feature !libproxy environment_proxy) + $(meson_feature libproxy) + $(meson_feature gnome gnome_proxy) + -Dinstalled_tests=false + -Ddebug_logs=false + ) + meson_src_configure +} + +multilib_src_test() { + dbus-run-session meson test -C "${BUILD_DIR}" || die 'tests failed' +} + +pkg_postinst() { + xdg_pkg_postinst + + multilib_pkg_postinst() { + gnome2_giomodule_cache_update \ + || die "Update GIO modules cache failed (for ${ABI})" + } + multilib_foreach_abi multilib_pkg_postinst +} + +pkg_postrm() { + xdg_pkg_postrm + + multilib_pkg_postrm() { + gnome2_giomodule_cache_update \ + || die "Update GIO modules cache failed (for ${ABI})" + } + multilib_foreach_abi multilib_pkg_postrm +} diff --git a/net-libs/libvncserver/Manifest b/net-libs/libvncserver/Manifest index 6d9b92507ef9..d43b60a29318 100644 --- a/net-libs/libvncserver/Manifest +++ b/net-libs/libvncserver/Manifest @@ -1,5 +1,7 @@ +AUX libvncserver-0.9.13-CVE-2020-29260.patch 822 BLAKE2B 04a21cb1834fbc1917a9b7b4d9d3623b4a0a22f4f2b6b4119caa3c16718f0aee708bbf4a6dfc36002ab7fc3004533a55ce321f4e0136fbbc0311a5c4c117bcc2 SHA512 927d929a69444749c350ec7277d29a621d09cdf180e978ae19942f157aff6e391a2c80f0d0b3c65f901a65c6f5ceb2a0b433254748a88098462f880dd2f8b5ee AUX libvncserver-0.9.13-test-fix-includetest.patch 1626 BLAKE2B 1a2bab37cc2716a0c3912a2d1b76329c81bc8c3c6b9a881a0813ab035e05a06683a908cb0ca55af94d8682ef6e0153c25d93dd09381ef1079c93808a0f7d529c SHA512 7cb35e32245152e0fdc10fd6ca80221bfe1d5a75ed9407e9d69a3082bba24cbf8868db5dc36390943e09f0beeb3a366f994ecde62c6f9d7e7688ba749249bf3d AUX libvncserver-0.9.13-test-fix-tjunittest.patch 989 BLAKE2B 2ebe6a5bf1f04bdb188ed9a3ca965a697e995268f2e65fb7de37da663cef91672111ba0eaa1d25c4309e3f600240042e773d342996168b8b9f2dac808004b140 SHA512 6ccee0741778ae7d504acf250bffdc2231556dbc1357fd08bf54fd769e73159c3c27714c512775266f0e1cdd145a61e029645a6676b198dbc8aa6bf7ad0ca04d DIST LibVNCServer-0.9.13.tar.gz 567491 BLAKE2B 138c7ca63f8cd30a21dc1b58aafa744e12a1a9eca503ffec18a63d18791d7a5df4eef176d7e4e797a2aadda1dd04d1b051abfd76bf5c6806d558c09ffee78cce SHA512 18b0a1698d32bbdbfe6f65f76130b2a95860e3cc76e8adb904269663698c7c0ae982f451fda1f25e5461f096045d40a89d9014258f439366d5b4feaa4999d643 +EBUILD libvncserver-0.9.13-r1.ebuild 2133 BLAKE2B 0748a9687740a8da6ee83b09e85165b11294ed5b2441a20e262c26919a79246a670bcfdb83ec69f5ea08982dfe7b58db0a1a7067797f8d8f384c04449e2382cb SHA512 fb16286c4490e8c903eabbbe45211caae16b645783240dd69069d03a6d5cd3f3b538668c8a752681e40646b356226292043736ebfea0d6d57a22ce45d95d6437 EBUILD libvncserver-0.9.13.ebuild 2080 BLAKE2B ece08bc97161240f55bfc76bb3709c5bcf4f9e0be117c3565f5ca4e33a9699b7067ff6d13ec66c06fad3ce2f7df847bfd29c1f7be216b6ddde684d6034c6687c SHA512 1734f760558d2e438dd37d821b50b255a8fe6d9ea8e345e41a665868ec7c08a5e3feb9d1025aad5abacb4642ffbb64466949427bef409f9bdf3fe80b3fc54b59 MISC metadata.xml 1078 BLAKE2B c1977b60d1c6943a3b6636c24e29d2b029dbb088c59defb8f4cd820aac317b6a207ffd3669e3da567270161392425b8a30be4bd544d91e6262f258449b71261c SHA512 d774527b02965a951ae5eba13a4865ee874aa0c969c32a4bc3643313ffefeb933700901dbeca6511048140d311b380e7e2035adfea4542b455b608d25eb47efe diff --git a/net-libs/libvncserver/files/libvncserver-0.9.13-CVE-2020-29260.patch b/net-libs/libvncserver/files/libvncserver-0.9.13-CVE-2020-29260.patch new file mode 100644 index 000000000000..23ffed8c1774 --- /dev/null +++ b/net-libs/libvncserver/files/libvncserver-0.9.13-CVE-2020-29260.patch @@ -0,0 +1,27 @@ +From bef41f6ec4097a8ee094f90a1b34a708fbd757ec Mon Sep 17 00:00:00 2001 +From: Christian Beier +Date: Sat, 21 Nov 2020 12:52:31 +0100 +Subject: [PATCH] libvncclient: free vncRec memory in rfbClientCleanup() + +Otherwise we leak memory. Spotted by Ramin Farajpour Cami +, thanks! +--- + libvncclient/vncviewer.c | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/libvncclient/vncviewer.c b/libvncclient/vncviewer.c +index d6b91f02..0a1bdcf6 100644 +--- a/libvncclient/vncviewer.c ++++ b/libvncclient/vncviewer.c +@@ -534,6 +534,8 @@ void rfbClientCleanup(rfbClient* client) { + client->clientData = next; + } + ++ free(client->vncRec); ++ + if (client->sock != RFB_INVALID_SOCKET) + rfbCloseSocket(client->sock); + if (client->listenSock != RFB_INVALID_SOCKET) +-- +2.35.1 + diff --git a/net-libs/libvncserver/libvncserver-0.9.13-r1.ebuild b/net-libs/libvncserver/libvncserver-0.9.13-r1.ebuild new file mode 100644 index 000000000000..2a9d65199e87 --- /dev/null +++ b/net-libs/libvncserver/libvncserver-0.9.13-r1.ebuild @@ -0,0 +1,76 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit cmake + +MY_P="LibVNCServer-${PV}" + +DESCRIPTION="library for creating vnc servers" +HOMEPAGE="https://libvnc.github.io/" +SRC_URI="https://github.com/LibVNC/${PN}/archive/${MY_P}.tar.gz" +S="${WORKDIR}/${PN}-${MY_P}" + +# common/d3des.*: https://github.com/LibVNC/libvncserver/issues/88 +LICENSE="GPL-2 GPL-2+ LGPL-2.1+ BSD MIT" +# no sub slot wanted (yet), see #578958 +SLOT="0" +KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux" +IUSE="+24bpp +filetransfer gcrypt gnutls ipv6 +jpeg lzo +png sasl ssl systemd +threads +zlib" +# https://bugs.gentoo.org/690202 +# https://bugs.gentoo.org/435326 +# https://bugs.gentoo.org/550916 +REQUIRED_USE=" + filetransfer? ( threads ) + jpeg? ( zlib ) + png? ( zlib ) + ssl? ( !gnutls? ( threads ) ) +" + +DEPEND=" + gcrypt? ( >=dev-libs/libgcrypt-1.5.3:0= ) + ssl? ( + !gnutls? ( + >=dev-libs/openssl-1.0.2:0= + ) + gnutls? ( >=net-libs/gnutls-2.12.23-r6:0= ) + ) + jpeg? ( media-libs/libjpeg-turbo:= ) + lzo? ( dev-libs/lzo ) + png? ( >=media-libs/libpng-1.6.10:0= ) + sasl? ( dev-libs/cyrus-sasl ) + systemd? ( sys-apps/systemd:= ) + zlib? ( >=sys-libs/zlib-1.2.8-r1:0= ) +" +RDEPEND="${DEPEND}" + +DOCS=( AUTHORS ChangeLog NEWS.md README.md TODO.md ) + +PATCHES=( + "${FILESDIR}"/${P}-test-fix-includetest.patch + "${FILESDIR}"/${P}-test-fix-tjunittest.patch + "${FILESDIR}"/${P}-CVE-2020-29260.patch +) + +src_configure() { + local mycmakeargs=( + -DWITH_FFMPEG=OFF + -DWITH_GTK=OFF + -DWITH_SDL=OFF + -DWITH_24BPP=$(usex 24bpp ON OFF) + -DWITH_TIGHTVNC_FILETRANSFER=$(usex filetransfer ON OFF) + -DWITH_GCRYPT=$(usex gcrypt ON OFF) + -DWITH_GNUTLS=$(usex gnutls $(usex ssl ON OFF) OFF) + -DWITH_IPv6=$(usex ipv6 ON OFF) + -DWITH_JPEG=$(usex jpeg ON OFF) + -DWITH_LZO=$(usex lzo ON OFF) + -DWITH_OPENSSL=$(usex gnutls OFF $(usex ssl ON OFF)) + -DWITH_PNG=$(usex png ON OFF) + -DWITH_SASL=$(usex sasl ON OFF) + -DWITH_SYSTEMD=$(usex systemd ON OFF) + -DWITH_THREADS=$(usex threads ON OFF) + -DWITH_ZLIB=$(usex zlib ON OFF) + ) + cmake_src_configure +} -- cgit v1.2.3